Description
page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
References
- MDVSA-2011:039 vendor-advisory
- http://security-tracker.debian.org/tracker/CVE-2010-1386
- ADV-2010-2722 vdb-entry
- 43068 third-party-advisory
- USN-1006-1 vendor-advisory
- 41856 third-party-advisory
- ADV-2011-0212 vdb-entry
- 42500 vdb-entry
- http://trac.webkit.org/changeset/56188
- SUSE-SR:2011:002 vendor-advisory
- ADV-2011-0552 vdb-entry
- https://bugs.webkit.org/show_bug.cgi?id=36255